Skip to content

Update symfony/yaml to 5.4.54 in build tooling - #585

Open
gbiernacki-dropbox wants to merge 1 commit into
mainfrom
symfony-yaml-update
Open

gbiernacki-dropbox wants to merge 1 commit into
mainfrom
symfony-yaml-update

Conversation

@gbiernacki-dropbox

Copy link
Copy Markdown
Contributor

What changed

  • symfony/yaml 5.4.3 / 5.4.10 → 5.4.54 in the build-tooling composer.lock files (root, dotnet, java-v1, java-v2, node, python, ruby)
  • Fixes CVE-2026-45133, CVE-2026-45304 and CVE-2026-45305 (fixed in 5.4.52)
  • symfony/deprecation-contracts → 2.5.4, symfony/polyfill-ctype → 1.37.0

Customer impact

None. Build tooling only; no SDK code changes and no release needed. SDK repos pick this up with their next release.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant